---
id: 4197
title: "[CVE-2018-17150] InterSystems Cache 2017.2.2.865.0 and 2018.1.2 Multiple Vulnerabilities"
cve: CVE-2018-17150
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/intersystems-cache-advisory"
published_at: "2019-07-24T00:00:00Z"
tags: ["xss", "xxe", "authorization", "cache", "vulnerability-advisory", "intersystems"]
phying_url: "https://phying.com/item/4197"
lang: en
---

# [CVE-2018-17150] InterSystems Cache 2017.2.2.865.0 and 2018.1.2 Multiple Vulnerabilities

## Summary

A Bishop Fox advisory on XSS, XXE and insufficient authorization in InterSystems Cache 2017.2.2.865.0 and 2018.1.2, where stored XSS can escalate privileges and exfiltrate data.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2018-17150
- **Published:** 2019-07-24T00:00:00Z
- **Original:** https://bishopfox.com/blog/intersystems-cache-advisory
- **Phying News:** https://phying.com/item/4197